An open-source AI agent that lives in your terminal.
1964 matches across 17 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 27 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 29 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 173 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 175 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 200 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 202 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 222 | // ── Factory ────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 278 | // ── Lifecycle ──────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 366 | // ── Input ──────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 403 | // ── Wait ───────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 475 | // ── Capture ────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 627 | // ── Output access ──────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 683 | // ── Cleanup ────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 705 | // ── Internal: flush PTY → xterm.js ────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 739 | // ── Internal: resolve xterm.js path ───── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 753 | // ── Internal: build HTML ──────────────── |
| MEDIUM | integration-tests/terminal-capture/terminal-capture.ts | 862 | // ── Internal: utils ───────────────────── |
| MEDIUM | integration-tests/terminal-capture/scenario-runner.ts | 17 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/scenario-runner.ts | 19 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/scenario-runner.ts | 89 | // ───────────────────────────────────────────── |
| MEDIUM | integration-tests/terminal-capture/scenario-runner.ts | 91 | // ───────────────────────────────────────────── |
| MEDIUM | docs/design/slash-command/phase1-technical-design.md | 90 | // ── 现有字段(保持不变) ────────────────────────────────────────────── |
| MEDIUM | docs/design/slash-command/phase1-technical-design.md | 102 | // ── Phase 1 新增:来源与执行类型 ────────────────────────────────────── |
| MEDIUM | docs/design/slash-command/phase1-technical-design.md | 129 | // ── Phase 1 新增:模式能力 ────────────────────────────────────────── |
| MEDIUM | docs/design/slash-command/phase1-technical-design.md | 137 | // ── Phase 1 新增:可见性 ────────────────────────────────────────────── |
| MEDIUM | docs/design/slash-command/phase1-technical-design.md | 151 | // ── Phase 3 预留:体验元数据(Phase 1 仅定义,不使用)────────────────── |
| MEDIUM | docs/design/slash-command/phase1-technical-design.md | 398 | // ── 现有方法(保持不变)──────────────────────────────────────────────── |
| MEDIUM | docs/design/slash-command/phase1-technical-design.md | 403 | // ── Phase 1 新增方法 ────────────────────────────────────────────────── |
| MEDIUM | docs/design/slash-command/phase1-technical-design.md | 538 | // ───────────────────────────────────────── |
| MEDIUM | scripts/test-rewind-e2e.sh | 2 | # ============================================================================= |
| MEDIUM | scripts/test-rewind-e2e.sh | 20 | # ============================================================================= |
| MEDIUM | scripts/test-rewind-e2e.sh | 40 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 42 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 249 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 251 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 268 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 270 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 313 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 315 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 360 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 362 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 386 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 388 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 416 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 418 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 455 | # --------------------------------------------------------------------------- |
| MEDIUM | scripts/test-rewind-e2e.sh | 457 | # --------------------------------------------------------------------------- |
| MEDIUM | packages/core/src/tools/exit-worktree.test.ts | 153 | // ── execute() integration: real git repo, real worktree ────── |
| MEDIUM | packages/core/src/tools/toAutoClassifierInput.test.ts | 30 | // EditTool ──────────────────────────────────────────────────────────────── |
| MEDIUM | packages/core/src/tools/toAutoClassifierInput.test.ts | 78 | // WriteFileTool ────────────────────────────────────────────────────────── |
| MEDIUM | packages/core/src/tools/toAutoClassifierInput.test.ts | 111 | // ShellTool ────────────────────────────────────────────────────────────── |
| MEDIUM | packages/core/src/tools/toAutoClassifierInput.test.ts | 142 | // WebFetchTool ──────────────────────────────────────────────────────────── |
| MEDIUM | packages/core/src/tools/toAutoClassifierInput.test.ts | 158 | // SkillTool ────────────────────────────────────────────────────────────── |
| MEDIUM | packages/core/src/tools/toAutoClassifierInput.test.ts | 173 | // AgentTool ────────────────────────────────────────────────────────────── |
| MEDIUM | packages/core/src/tools/agent/agent.ts | 1249 | // ── Isolation state hoisted to the outermost scope ──────────── |
| MEDIUM | packages/core/src/tools/agent/agent.ts | 1477 | // ── Optional worktree isolation (Phase 1: provision) ────────── |
| MEDIUM | packages/core/src/tools/agent/agent.ts | 1645 | // ── Optional worktree isolation (Phase 2: rebind cwd) ───────── |
| MEDIUM | packages/core/src/tools/agent/agent.ts | 1728 | // ── Background (async) execution path ────────────────────── |
| MEDIUM | packages/core/src/tools/agent/agent.ts | 2197 | // ── Foreground (synchronous) execution path ──────────────── |
| MEDIUM | packages/core/src/core/coreToolScheduler.ts | 725 | // ─── Tool Concurrency Helpers ──────────────────────────────── |
| 380 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | integration-tests/test-helper.ts | 27 | export function createToolCallErrorMessage( |
| LOW | integration-tests/terminal-bench/qwen_code.py | 58 | def _install_agent_script_path(self) -> os.PathLike: |
| LOW | …-tests/terminal-capture/subagent-flicker-regression.ts | 304 | function buildSubagentSingleToolCall(packageJsonPath: string, index: number) { |
| LOW | …concurrent-runner/export-html-from-chatrecord-jsonl.js | 377 | function injectDataIntoHtmlTemplate(template, data) { |
| LOW | …concurrent-runner/export-html-from-chatrecord-jsonl.js | 488 | function computeStartTimeFromRecords(records) { |
| LOW | …concurrent-runner/export-html-from-chatrecord-jsonl.js | 500 | function extractToolNameFromRecord(record) { |
| LOW | …concurrent-runner/export-html-from-chatrecord-jsonl.js | 642 | function transformPartsToToolCallContent(parts) { |
| LOW | …concurrent-runner/export-html-from-chatrecord-jsonl.js | 706 | function convertChatRecordsToSessionData(records) { |
| LOW | …concurrent-runner/export-html-from-chatrecord-jsonl.js | 774 | function addOrMergeToolCallMessage(toolCallMessage) { |
| LOW | …concurrent-runner/export-html-from-chatrecord-jsonl.js | 913 | function buildSessionDataFromExportJsonl(objects) { |
| LOW | integration-tests/sdk-typescript/system-control.test.ts | 32 | function createStreamingInputWithControlPoint( |
| LOW | …ration-tests/sdk-typescript/permission-control.test.ts | 45 | function createStreamingInputWithControlPoint( |
| LOW | integration-tests/sdk-typescript/test-helper.ts | 720 | export function createControlledStreamingInput( |
| LOW | integration-tests/sdk-typescript/test-helper.ts | 836 | export function assertSuccessfulCompletion(messages: SDKMessage[]): void { |
| LOW | integration-tests/sdk-typescript/test-helper.ts | 975 | export function createToolCallErrorMessage( |
| LOW | docs/design/custom-api-key-auth-wizard-prd.md | 541 | function generateCustomApiKeyEnvKey(protocol: string, baseUrl: string): string { |
| LOW | docs/design/telemetry-resource-attributes-design.md | 218 | function parseOtelResourceAttributes( |
| LOW | docs/design/slash-command/phase1-technical-design.md | 336 | export function getEffectiveSupportedModes(cmd: SlashCommand): ExecutionMode[] { |
| LOW | docs/design/slash-command/phase1-technical-design.md | 448 | function filterCommandsForNonInteractive( |
| LOW | docs/design/slash-command/phase3-technical-design.md | 117 | export function getCommandSubcommandNames(cmd: SlashCommand): string[]; |
| LOW | scripts/verify-installation-release.js | 44 | function standaloneArchiveNamesFromReleaseTargets(releaseTargets) { |
| LOW | scripts/verify-installation-release.js | 168 | function assertExpectedChecksumEntries(checksums) { |
| LOW | scripts/verify-installation-release.js | 185 | function assertExpectedArchiveFiles(dir) { |
| LOW | scripts/verify-installation-release.js | 203 | async function assertRemoteAssetChecksums( |
| LOW | scripts/check-i18n.ts | 67 | export function shouldWriteUnusedKeysJson(): boolean { |
| LOW | scripts/check-i18n.ts | 157 | export function findForbiddenZhTwPatterns( |
| LOW | scripts/check-i18n.ts | 330 | function saveKeysOnlyInLocalesToJson( |
| LOW | scripts/generate-settings-schema.ts | 48 | function convertItemDefinitionToJsonSchema( |
| LOW | scripts/generate-settings-schema.ts | 98 | function convertSettingToJsonSchema( |
| LOW | scripts/get-release-version.js | 56 | function detectRollbackAndGetBaseline(npmDistTag) { |
| LOW | scripts/get-release-version.js | 165 | function getAndVerifyTags(npmDistTag, _gitTagPattern) { |
| LOW | scripts/get-release-version.js | 189 | function getLatestStableReleaseTag() { |
| LOW | scripts/build-hosted-installation-assets.js | 203 | async function buildHostedInstallationAssets(outDir, options = {}) { |
| LOW | scripts/build-hosted-installation-assets.js | 230 | function assertNoUnexpectedHostedFiles(outDir) { |
| LOW | scripts/build-hosted-installation-assets.js | 241 | function copyHostedInstallationAsset(source, destination, asset) { |
| LOW | scripts/build-hosted-installation-assets.js | 286 | function assertHostedInstallerSource(source, output) { |
| LOW | scripts/build-hosted-installation-assets.js | 326 | async function assertHostedInstallationAssetChecksums(outDir) { |
| LOW | scripts/tests/install-script.test.js | 3346 | function createBadWindowsNodeArchive(tmpDir) { |
| LOW | scripts/tests/install-script.test.js | 3356 | function createFakeWindowsNodeArchive(tmpDir) { |
| LOW | scripts/tests/install-script.test.js | 3366 | function createFakeWindowsStandaloneArchive(tmpDir) { |
| LOW | scripts/tests/install-script.test.js | 3389 | function createFakeWindowsStandaloneInstall(installRoot) { |
| LOW | scripts/tests/install-script.test.js | 3413 | function createFakeWindowsNpmTools(fakeBin) { |
| LOW | scripts/tests/install-script.test.js | 3436 | function createFakeWindowsCurlCommand(fakeBin) { |
| LOW | scripts/tests/install-script.test.js | 3722 | function runWindowsPowerShellScript(scriptPath, args = [], env = {}) { |
| LOW | scripts/tests/install-script.test.js | 3782 | function createSymlinkStandaloneArchive(tmpDir) { |
| LOW | scripts/tests/install-script.test.js | 3812 | function createTraversalStandaloneArchive(tmpDir) { |
| LOW | scripts/tests/install-script.test.js | 3853 | function writeStandaloneReleaseAssets(outDir, archiveNames) { |
| LOW | scripts/tests/install-script.test.js | 3861 | function writeStandaloneReleaseChecksums(outDir, archiveNames) { |
| LOW | scripts/tests/install-script.test.js | 3872 | function placeholderChecksumContent(archiveNames) { |
| LOW | scripts/lib/release-helpers.js | 57 | export function isExpectedMissingGitHubRelease(error) { |
| LOW | packages/acp-bridge/src/status.ts | 392 | export function createIdleWorkspaceMemoryStatus( |
| LOW | packages/acp-bridge/src/status.ts | 406 | export function createIdleWorkspaceAgentsStatus( |
| LOW | packages/acp-bridge/src/status.ts | 416 | export function createIdleWorkspaceMcpStatus( |
| LOW | packages/acp-bridge/src/status.ts | 438 | export function createIdleWorkspaceSkillsStatus( |
| LOW | packages/acp-bridge/src/status.ts | 449 | export function createIdleWorkspaceProvidersStatus( |
| LOW | packages/acp-bridge/src/status.ts | 585 | export function createIdleAcpPreflightCells(): ServePreflightCell[] { |
| LOW | packages/acp-bridge/src/status.ts | 633 | export function mapDomainErrorToErrorKind( |
| LOW | packages/sdk-python/tests/unit/test_validation.py | 13 | def test_rejects_resume_with_continue_session() -> None: |
| LOW | packages/sdk-python/tests/unit/test_validation.py | 23 | def test_rejects_session_id_with_resume() -> None: |
| LOW | packages/sdk-python/tests/unit/test_validation.py | 33 | def test_rejects_invalid_session_id() -> None: |
| 698 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | esbuild.config.js | 121 | global: 'globalThis', |
| LOW | docs-site/next-env.d.ts | 1 | /// <reference types="next" /> |
| LOW | integration-tests/cli/qwen-serve-routes.test.ts | 261 | // retry the model switch against (via POST /session/:id/model). |
| LOW | integration-tests/cli/qwen-serve-baseline.test.ts | 461 | if (daemon) await daemon.dispose(); |
| LOW | integration-tests/cli/qwen-serve-baseline.test.ts | 481 | // the SAME servers — its accounting is NOT what the |
| LOW | docs/users/qwen-serve.md | 381 | |
| LOW | docs/developers/examples/daemon-client-quickstart.md | 41 | // (b) omit `workspaceCwd` entirely — the SDK then sends no `cwd` |
| LOW | scripts/build_package.js | 1 | /** |
| LOW | scripts/sandbox_command.js | 1 | /** |
| LOW | scripts/start.js | 1 | /** |
| LOW | scripts/esbuild-shims.js | 21 | import { dirname } from 'node:path'; |
| LOW | scripts/build.js | 1 | /** |
| LOW | scripts/test-rewind-e2e.sh | 1 | #!/usr/bin/env bash |
| LOW | scripts/clean.js | 1 | /** |
| LOW | scripts/generate-git-commit-info.js | 1 | /** |
| LOW | scripts/build_vscode_companion.js | 1 | /** |
| LOW | scripts/build_sandbox.js | 1 | /** |
| LOW | scripts/copy_files.js | 1 | #!/usr/bin/env node |
| LOW | scripts/generate-settings-schema.ts | 181 | // Non-empty plain object — publish so IDE editors can surface the |
| LOW | scripts/copy_bundle_assets.js | 1 | /** |
| LOW | packages/acp-bridge/src/workspacePaths.ts | 41 | */ |
| LOW | packages/acp-bridge/src/eventBus.ts | 201 | // wrap publish in try/catch — and would corrupt state in |
| LOW | packages/acp-bridge/src/eventBus.ts | 221 | if (this.ring.length > this.ringSize) this.ring.shift(); |
| LOW | packages/acp-bridge/src/eventBus.ts | 241 | data: { reason: 'queue_overflow', droppedAfter: event.id }, |
| LOW | packages/acp-bridge/src/eventBus.ts | 261 | // `WARN_THRESHOLD_RATIO`. Fires ONCE per overflow episode (the |
| LOW | packages/acp-bridge/src/eventBus.ts | 381 | disposed = true; |
| LOW | packages/acp-bridge/src/eventBus.test.ts | 301 | // Capture the listener count via the AbortSignal — we add a |
| LOW | packages/acp-bridge/src/inMemoryChannel.test.ts | 101 | // the round-trip tests above for one frame but echo the writer's |
| LOW | packages/core/src/tools/shell.test.ts | 1561 | expect(result.llmContent).not.toContain('foreground command ran for'); |
| LOW | packages/core/src/tools/shell.test.ts | 1601 | 'foreground command ran for 75s', |
| LOW | packages/core/src/tools/shell.test.ts | 4621 | }); |
| LOW | packages/core/src/tools/shell.test.ts | 4661 | |
| LOW | packages/core/src/tools/shell.test.ts | 4861 | }); |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 301 | // PR 14 fix (review #4247 wenshao S4 + R8 #2): mode-without-budget |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 481 | let resolvedMode = resolved.budgetMode; |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 941 | this.cliConfig.getMcpServers() || {}, |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1001 | this.eventEmitter?.emit('mcp-client-update', this.clients); |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1021 | // its tracking reference removed, not its underlying |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1121 | // `discoverMcpToolsForServerInternal` is reachable from |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1141 | // previously bypassed the budget gate, so a server refused at startup |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1161 | // freshly reserved the slot. Used in the connect-failure catch |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1221 | |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1241 | // The standalone `evaluateBudgetState` that used to live here |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1261 | // transient reconnect hiccup shouldn't lose that. |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1581 | // Find servers that are new or have changed configuration |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1601 | |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1621 | continue; |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1641 | // Refusal still happens — just inside the inner call. The |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1761 | // the live `toolRegistry` and re-emits `mcp-client-update`. |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1781 | `Forced disconnect of timed-out server '${serverName}' threw: ${getErrorMessage(err)}`, |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1801 | // PR 14 fix (review #4247 wenshao R5 line 956 + R8 #4 line |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1941 | // PR 14 fix (review #4247 wenshao R9 #6 line 1521): hoist the |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1961 | // threaded execution model. If the manager ever grows an |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 1981 | |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 2001 | throw new BudgetExhaustedError( |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 2061 | try { |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 2081 | // were a no-op, the orphan transport would survive with |
| LOW | packages/core/src/tools/mcp-client-manager.ts | 2121 | // |
| LOW | packages/core/src/tools/priorReadEnforcement.ts | 181 | type: ToolErrorType.FILE_CHANGED_SINCE_READ, |
| LOW | packages/core/src/tools/mcp-client.test.ts | 641 | // Simulate the disable path running before connect's catch fires. |
| 484 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | integration-tests/concurrent-runner/runner.py | 904 | # Step 1: Create worktree |
| LOW | integration-tests/concurrent-runner/runner.py | 911 | # Step 2: Run CLI |
| LOW | integration-tests/concurrent-runner/runner.py | 916 | # Step 3: Success |
| LOW | integration-tests/concurrent-runner/runner.py | 937 | # Step 4: Capture git diff (before cleanup) |
| LOW | integration-tests/concurrent-runner/runner.py | 953 | # Step 5: Collect session log (before cleanup) |
| LOW | integration-tests/concurrent-runner/runner.py | 976 | # Step 7: Cleanup |
| LOW | …tion-tests/interactive/file-system-interactive.test.ts | 45 | // Step 1: Read the file |
| LOW | …tion-tests/interactive/file-system-interactive.test.ts | 59 | // Step 2: Write the file |
| LOW | packages/core/src/tools/computer-use/bootstrap.ts | 168 | // Step 1: install approval gate. |
| LOW | packages/core/src/tools/computer-use/bootstrap.ts | 184 | // Step 2: spawn (idempotent). Remember whether THIS call performed |
| LOW | packages/core/src/tools/computer-use/bootstrap.ts | 191 | // Step 3: macOS permission probe + guide. |
| LOW | packages/core/src/core/geminiChat.test.ts | 1834 | // Step 1: auto-compression fails — counter increments on the chat. |
| LOW | packages/core/src/core/geminiChat.test.ts | 1859 | // Step 2: a forced /compress succeeds. After this, the counter must |
| LOW | packages/core/src/core/geminiChat.test.ts | 1878 | // Step 3: next auto-compression sees the reset counter. |
| LOW | packages/core/src/core/geminiChat.test.ts | 2455 | // Step 1: latch the breaker via MAX_CONSECUTIVE_FAILURES below-hard |
| LOW | packages/core/src/core/geminiChat.test.ts | 2487 | // Step 2: bump lastPromptTokenCount into hard tier and send again. |
| LOW | packages/core/src/core/geminiChat.test.ts | 2519 | // Step 3: verify the post-call reset took effect on the chat. A |
| LOW | …core/src/core/openaiContentGenerator/converter.test.ts | 3689 | // Step 1: Simulate what transformMcpContentToParts returns for a Figma |
| LOW | …core/src/core/openaiContentGenerator/converter.test.ts | 3698 | // Step 2: convertToFunctionResponse wraps the MCP result |
| LOW | …core/src/core/openaiContentGenerator/converter.test.ts | 3707 | // Step 3: Build the conversation history (model tool call + tool result) |
| LOW | …core/src/core/openaiContentGenerator/converter.test.ts | 3727 | // Step 4: Convert to OpenAI format |
| LOW | packages/core/src/extension/marketplace.ts | 211 | // Step 1: Parse source into repo and optional pluginName |
| LOW | packages/core/src/extension/marketplace.ts | 218 | // Step 2: Determine repo type with correct priority order |
| LOW | packages/core/src/extension/marketplace.ts | 281 | // Step 3: If marketplace config exists, update type to marketplace |
| LOW | packages/core/src/extension/gemini-converter.ts | 79 | // Step 1: Copy all files and directories to temporary directory |
| LOW | packages/core/src/extension/gemini-converter.ts | 82 | // Step 2: Convert TOML commands to Markdown in commands folder |
| LOW | packages/core/src/extension/gemini-converter.ts | 88 | // Step 3: Create qwen-extension.json with converted config |
| LOW | packages/core/src/extension/claude-converter.ts | 368 | // Step 1: Load marketplace.json |
| LOW | packages/core/src/extension/claude-converter.ts | 392 | // Step 2: Resolve plugin source directory based on source field |
| LOW | packages/core/src/extension/claude-converter.ts | 409 | // Step 3: Load and merge plugin.json if exists (based on strict mode) |
| LOW | packages/core/src/extension/claude-converter.ts | 429 | // Step 4: Resolve MCP servers from JSON files if needed |
| LOW | packages/core/src/extension/claude-converter.ts | 450 | // Step 5: Create temporary directory for converted extension |
| LOW | packages/core/src/extension/claude-converter.ts | 454 | // Step 6: Copy plugin files to temporary directory |
| LOW | packages/core/src/extension/claude-converter.ts | 485 | // Step 7: Handle hooks from file paths if needed |
| LOW | packages/core/src/extension/claude-converter.ts | 520 | // Step 9: Convert collected agent files from Claude format to Qwen format |
| LOW | packages/core/src/extension/claude-converter.ts | 524 | // Step 10: Convert to Qwen format config |
| LOW | packages/core/src/extension/claude-converter.ts | 527 | // Step 11: Write qwen-extension.json |
| LOW | packages/core/src/models/modelsConfig.test.ts | 343 | // Step 1: Switch to a provider model - this applies provider config |
| LOW | packages/core/src/models/modelsConfig.test.ts | 363 | // Step 2: User manually sets credentials via updateCredentials |
| LOW | packages/core/src/models/modelsConfig.ts | 928 | // Step 1: If modelId exists in registry, always use config from modelRegistry |
| LOW | packages/core/src/models/modelsConfig.ts | 992 | // Step 2: Check if there are existing credentials from other sources (not modelProviders) |
| LOW | packages/core/src/models/modelsConfig.ts | 1031 | // Step 3: Fall back to default model for the authType |
| LOW | packages/core/src/models/modelsConfig.ts | 1041 | // Step 4: No default available - leave generationConfig incomplete |
| LOW | packages/cli/src/ui/utils/customBanner.ts | 273 | // Step 1: refuse non-regular files BEFORE opening. On POSIX, opening a |
| LOW | packages/cli/src/ui/utils/customBanner.ts | 297 | // Step 2: open with O_NOFOLLOW (POSIX only) so a TOCTOU symlink swap |
| LOW | packages/cli/src/config/settings.ts | 751 | // Step 1: Load from .env files (higher priority than settings.env) |
| LOW | packages/cli/src/config/settings.ts | 792 | // Step 2: settings.env fallback (lowest priority, no-override). |
| LOW | packages/cli/src/config/migration/versions/v2-to-v3.ts | 157 | // Step 1: Handle consolidated paths (multiple old paths → single new path) |
| LOW | packages/cli/src/config/migration/versions/v2-to-v3.ts | 191 | // Step 2: Handle remaining individual disable* → enable* mappings |
| LOW | packages/cli/src/config/migration/versions/v2-to-v3.ts | 214 | // Step 3: Always update version to 3 |
| LOW | packages/cli/src/config/migration/versions/v1-to-v2.ts | 137 | // Step 1: Map known V1 keys to V2 nested paths |
| LOW | packages/cli/src/config/migration/versions/v1-to-v2.ts | 180 | // Step 2: Map V1 disable* keys to V2 nested disable* paths |
| LOW | packages/cli/src/config/migration/versions/v1-to-v2.ts | 198 | // Step 3: Preserve mcpServers at the top level |
| LOW | packages/cli/src/config/migration/versions/v1-to-v2.ts | 204 | // Step 4: Carry over any unrecognized keys (including unknown nested objects) |
| LOW | packages/cli/src/config/migration/versions/v1-to-v2.ts | 259 | // Step 5: Set version to 2 |
| LOW | packages/cli/src/utils/writeWithBackup.ts | 80 | // Step 1: Write to temporary file |
| LOW | packages/cli/src/utils/writeWithBackup.ts | 83 | // Step 2: If target exists, back it up |
| LOW | packages/cli/src/utils/writeWithBackup.ts | 114 | // Step 3: Rename temp file to target |
| LOW | packages/cli/src/utils/osc.test.ts | 215 | // Step 1: title with e=1 (base64) |
| LOW | packages/cli/src/utils/osc.test.ts | 219 | // Step 2: body with e=1 (base64) |
| 18 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 481 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 491 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 125 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 146 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 181 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 236 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 250 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 271 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 279 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 333 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 347 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 406 | transport.push( |
| HIGH | packages/sdk-python/tests/unit/test_query_core.py | 420 | transport.push( |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | integration-tests/concurrent-runner/runner.py | 246 | except Exception: |
| LOW | integration-tests/concurrent-runner/runner.py | 346 | except Exception as e: |
| LOW | integration-tests/concurrent-runner/runner.py | 926 | except Exception as e: |
| LOW | integration-tests/concurrent-runner/runner.py | 950 | except Exception as e: |
| LOW | integration-tests/concurrent-runner/runner.py | 963 | except Exception as e: |
| MEDIUM | integration-tests/concurrent-runner/runner.py | 1065 | print(f"Error: Config file not found: {args.config}", file=sys.stderr) |
| LOW | integration-tests/concurrent-runner/runner.py | 1077 | except Exception as e: |
| MEDIUM | docs/users/features/hooks.md | 1262 | print(f"Error: Invalid JSON input: {e}", file=sys.stderr) |
| MEDIUM | docs/developers/sdk-python.md | 65 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | docs/developers/sdk-python.md | 111 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | docs/developers/sdk-python.md | 268 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | docs/developers/sdk-python.md | 328 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | docs/developers/sdk-python.md | 369 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | docs/developers/sdk-python.md | 401 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | docs/developers/sdk-python.md | 429 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | docs/developers/sdk-python.md | 462 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | packages/sdk-python/README.md | 59 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | packages/sdk-python/README.md | 103 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | packages/sdk-python/README.md | 201 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | packages/sdk-python/README.md | 272 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | packages/sdk-python/README.md | 317 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | packages/sdk-python/README.md | 349 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | packages/sdk-python/README.md | 377 | print(f"Error: {error.get('message', 'Unknown error')}") |
| MEDIUM | packages/sdk-python/README.md | 409 | print(f"Error: {error.get('message', 'Unknown error')}") |
| LOW | packages/sdk-python/scripts/smoke_real.py | 365 | except Exception as exc: |
| LOW | packages/sdk-python/src/qwen_code_sdk/query.py | 114 | except Exception as exc: |
| LOW | packages/sdk-python/src/qwen_code_sdk/query.py | 132 | except Exception as exc: |
| LOW | packages/sdk-python/src/qwen_code_sdk/query.py | 156 | except Exception as exc: # pragma: no cover - critical propagation path |
| LOW | packages/sdk-python/src/qwen_code_sdk/query.py | 208 | except Exception as exc: # pragma: no cover - fatal background path |
| LOW | packages/sdk-python/src/qwen_code_sdk/query.py | 245 | except Exception as exc: |
| LOW | packages/sdk-python/src/qwen_code_sdk/query.py | 290 | except Exception as exc: |
| LOW | packages/sdk-python/src/qwen_code_sdk/query.py | 461 | except Exception as exc: |
| MEDIUM | packages/sdk-python/src/qwen_code_sdk/query.py | 110 | def _initialize(self) -> None: |
| MEDIUM | packages/sdk-python/src/qwen_code_sdk/query.py | 117 | def _send_single_turn_prompt(self) -> None: |
| MEDIUM | packages/sdk-python/src/qwen_code_sdk/query.py | 141 | def _message_router(self) -> None: |
| MEDIUM | packages/sdk-python/src/qwen_code_sdk/query.py | 203 | def runner() -> None: |
| LOW | packages/sdk-python/src/qwen_code_sdk/transport.py | 105 | except Exception: |
| LOW | packages/sdk-python/src/qwen_code_sdk/sync_query.py | 53 | except Exception: |
| LOW | packages/sdk-python/src/qwen_code_sdk/sync_query.py | 75 | except Exception as exc: |
| LOW | packages/sdk-python/src/qwen_code_sdk/sync_query.py | 164 | except Exception: |
| LOW | packages/sdk-python/src/qwen_code_sdk/sync_query.py | 174 | except Exception: |
| LOW | packages/sdk-python/src/qwen_code_sdk/sync_query.py | 186 | except Exception: |
| LOW | packages/sdk-python/src/qwen_code_sdk/sync_query.py | 207 | except Exception: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | integration-tests/concurrent-runner/runner.py | 9 | |
| LOW | integration-tests/concurrent-runner/runner.py | 20 | |
| LOW | integration-tests/concurrent-runner/runner.py | 30 | |
| LOW | integration-tests/concurrent-runner/runner.py | 30 | |
| LOW | packages/sdk-python/tests/unit/test_validation.py | 1 | |
| LOW | packages/sdk-python/tests/unit/test_transport.py | 1 | |
| LOW | packages/sdk-python/tests/unit/test_query_core.py | 1 | |
| LOW | packages/sdk-python/tests/integration/conftest.py | 1 | |
| LOW | …ckages/sdk-python/tests/integration/test_sync_query.py | 1 | |
| LOW | …kages/sdk-python/tests/integration/test_async_query.py | 1 | |
| LOW | packages/sdk-python/scripts/smoke_real.py | 8 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/query.py | 3 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/transport.py | 3 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 3 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 8 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 8 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 8 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 8 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 8 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 15 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 39 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 39 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/__init__.py | 41 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/sync_query.py | 3 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/types.py | 3 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/errors.py | 3 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/json_lines.py | 3 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/validation.py | 3 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | packages/core/src/tools/glob.test.ts | 349 | path: '../../../../../../../../../../tmp', // Definitely outside |
| MEDIUM | packages/core/src/utils/memoryImportProcessor.test.ts | 408 | // This test verifies the robust findCodeRegions implementation |
| MEDIUM | packages/core/src/utils/memoryDiscovery.test.ts | 66 | // Use maxRetries option for robust cleanup without race conditions |
| MEDIUM | packages/core/src/utils/filesearch/fileSearch.test.ts | 554 | // Perform a more specific search that should leverage the broad search's cached results |
| MEDIUM | …ui/components/messages/InlineParallelAgentsDisplay.tsx | 178 | // the component is robust to mixed groups (e.g. a sibling Shell call |
| MEDIUM | packages/cli/src/ui/hooks/useGeminiStream.test.tsx | 2490 | // handler's guard robust against `addItem` skipping a |
| MEDIUM | packages/cli/src/ui/hooks/useToolScheduler.test.ts | 203 | // to find a robust way to test these scenarios. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | integration-tests/cli/notebook-edit.test.ts | 141 | print(result) |
| HIGH | packages/core/src/tools/todoWrite.ts | 166 | print("Hello World") |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | docs/users/configuration/model-providers.md | 341 | > BAILIAN_CODING_PLAN_API_KEY=your-api-key-here |
| HIGH | docs/developers/tools/web-search.md | 165 | "TAVILY_API_KEY": "your-api-key-here" |
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | …/openaiContentGenerator/openaiContentGenerator.test.ts | 175 | generatorWithClient.pipeline.client.embeddings.create.mockRejectedValue( |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | integration-tests/concurrent-runner/runner.py | 214 | # Create a unique branch for this worktree based on the specified branch |
| MEDIUM | packages/webui/scripts/add-license-header.sh | 34 | # Create a temporary file with the license header followed by the original content |
| MEDIUM | .github/workflows/release-sdk.yml | 290 | # Create a metadata file to record which CLI version was bundled |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | packages/core/src/core/geminiChat.test.ts | 5515 | const filler = 'lorem ipsum dolor sit amet '.repeat(20); |
| LOW | packages/core/src/core/geminiChat.test.ts | 5515 | const filler = 'lorem ipsum dolor sit amet '.repeat(20); |
| LOW | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 1439 | const longText = `not only five centuries, but also the leap into electronic typesetting, remaining essentially un |
| LOW | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 1442 | It is a long established fact that a reader will be distracted by the readable content of a page when looking at its lay |
| LOW | …kages/cli/src/ui/components/shared/text-buffer.test.ts | 1445 | Contrary to popular belief, Lorem Ipsum is not simply random text. It has roots in a piece of classical Latin literature |
| LOW | packages/cli/src/ui/hooks/useCommandCompletion.test.ts | 241 | const text = 'user@example.com'; |
| LOW | …webui/src/components/ChatViewer/ChatViewer.stories.tsx | 145 | 'You can define an interface in TypeScript like this:\n\n```typescript\ninterface User {\n id: number;\n name: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …al-bench/ci-tasks/hello-world/tests/setup-uv-pytest.sh | 12 | # Check if we're in a valid working directory |
| LOW | scripts/create_alias.sh | 24 | # Check if the alias already exists |
| LOW | packages/webui/scripts/add-license-header.sh | 30 | # Check if the file starts with the license header |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | scripts/test-rewind-e2e.sh | 18 | # Usage: |
| LOW | scripts/installation/install-qwen-with-source.sh | 7 | # Usage: |
| LOW | scripts/installation/install-qwen-standalone.sh | 7 | # Usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | integration-tests/concurrent-runner/runner.py | 892 | |
| LOW | packages/sdk-python/src/qwen_code_sdk/transport.py | 91 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | …webui/src/components/ChatViewer/ChatViewer.stories.tsx | 112 | "To create a React component, you can use either a function or a class. Here's a simple example of a functional |